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MESSAGE TO THE VERIFIER. THE 
IDENTIFICATION MESSAGE INCLUDING AN 
INDICATION OF AN IDENTITY OF THE PROVER, 
THE INDICATION OF THE IDENTITY INCLUDING 
AN INDICATION OF A PUBLIC KEY KP 
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PERFORM AN IDENTIFICATION ROUND: 



THE VERIFIER CHOOSES A CHALLENGE 
Q AND A PADDING STRING X 
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THE VERIFIER SENDS AN INITIALIZATION 
MESSAGE TO THE PROVER. THE INITILIZATION 
MESSAGE INCLUDING A DISGUISED FORM Y PRODUCED 
BY APPLYING A PUBLIC DISGUISING FUNCTION FP TO 
Q AND X. Y BEING EQUAL TO FP(Q.X) 
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THE PROVER COMPUTES A RANDOM NUMBER R BY 240 
APPLYING A PRIVATE DISGUISING ^ 
FUNCTION FV TO Y, R BEING EQUAL TO FV(Y) 



THE PROVER SENDS A COMMIT MESSAGE TO THE 
VERIFIER. THE COMMIT MESSAGE INCLUDING A 
DISGUISED FORM OF R PRODUCED BY 
APPLYING A FUNCTION F TO R. THE DISGUISED 
FORM OF R BEING EQUAL TO F(R) 



250 



FIG. 4B 



THE VERIFIER SENDS A CHALLENGE MESSAGE 
TO THE PROVER, THE CHALLENGE MESSAGE 
INCLUDING THE CHALLENGE Q AND THE 
PADDING STRING X 



THE PROVER VERIFIES THAT Y=FP(Q,X) 



THE PROVER SENDS A RESPONSE MESSAGE 
TO THE VERIFIER, THE RESPONSE MESSAGE 
COMPRISING A RESPONSE A, THE RESPONSE A 

SATISFYING A PREDICATE RELATIONSHIP 
PRED(A.Q,F(R).KP), WHEREIN SATISFYING THE 

PREDICATE RELATIONSHIP PROVIDES AN 
INDICATION THAT THE PROVER HAS ACCESS 
TO THE PRIVATE KEY 



THE VERIFIER VERIFIES THAT A SATISFIES THE 
PREDICATE REU\TIONSHIP PRED(A.Q,F(R).KP) 



THE VERIFIER DETERMINES THAT THE 
PROVER HAS ACCESS TO THE PRIVATE KEY 
BASED ON A RESULT OF PERFORMING THE 
IDENTIFICATION ROUND 



